2.- Mobile application is 
commanded to move to sec- 
ond computer ^ 



/ 



/ 



/ 




3. Mobile application re- 
sumes execution on second 
computer 



1. Mobile application starts 
running on first computer 




6, Mobile application contin- 
ues moving between comput- 
ers until its tasks are done. 



4. Mobile application is 
commanded to move to 
third computer 




5. Mobile application re- 
sumes execution on third 
computer 



1 



f 



L Salesman fills out 
expense report form, 
then clicks "OK", 



2. Form sends itself to 
manager for approval / 




/ 



/ 



/ 



/ 



I 



/ 



/ 



I 



3. Manager re- 
views form and 
finds a problem, 
clicks "ketum" 



/ 




Form sends 
itself back to 
salesman for 
update 



/ 



/ 



/ 



/ 



/ 



y 6. Form re- 
turns itself to 
manager 



7. Manager ac- 
cepts form and 
clicks "OK" 



8. Form sends itself to 
Admin department 



5. Salesman 
makes correc- 
tion, clicks 



9, Form updates 
employee's 
records in compa- 
ny data base 





3^ 



10. Form sends itself to 
Finance department 



11. Form notifies accoun- 
tant, who cuts a check 



f 



f 




f 
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62 



Server inspects its pre- 
installed software for 
missing code. If it is 
found, it is returned to 
the current host. 



Server recieves 
request for 
missing code. 



50 

/ 



/ 




Server 

e. If originating host is not 
•trusted by server, server 
inspects its own software. 



52 




d. If originating host is 
trusted by server, server 
sends request to originating 
host for missing code. 



If code is located,- 
it is sent to the 
current host. 



If code is not 
located, message is 
sent to current host 



If originating 
host returns the 
missing code, 
the code is sent 
to current host. 



If originating 
host does not 
return the 
missing code, thi 
server inspectect 
its own software 
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c. Send request 
to server for 
required code. 



f If server returns missing 
code, missing code is added 
to mobile applications's 
internal datastore 




ainspect mobile 
application's 
internal 
datastore 




Originating host 
inspectes its own pre- 
installed software. If the 
needed code is located, it 
is returned to the server. 



Originating Host 



b. Inspect local 
host's pre- 
installed code. 



Current Host 



Figure 7 



Host1 



I. Mobile appUcadon 
LS created, and then 
later dispatched 



server 



4. 



52^ 




2, Server saves copy/ 
of mobile applica- 
tion's code y 




so 



3. Server tbrwards ^ 
mobile appiicanon t^ 
next host 



Storage 



6. Server compares 
^ new code against 
\ saved code 

^ ^ "T'servertbrwardi 
^ mobile appitcatior 

/ to next host 

5. Server receives 
i mobile application 



Host 3 




MO 




8. Mobile application ar- 
nves at next host 



4. Mobile application is re- 
ceived, and later dispatched 
to next host. 



Host 2 



^-e. 




r 



Hosti 



r 



server 
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1. Mobile application 
is created, and then 
later dispatched 




Storage 



2. Server ensures ail 
code IS stnppcd from ^ g gpver s avcs copy 
mobile application, of mobiie applica- 

aoa's (empty) code 




4 Server forwards 
mobile application t 
next host 




Code whidi IS 
known to be 
safe 




6. Server supphes any miss- 
ing code required by mobile 
application. 



5. Mobile application is re- 
ceived. 



Host 2 




50 



52 



Host1 




1. Mobile application 
is created, and then 
later dispatched 



Server 




2. Server saves 
copy of mobile 
application's 
code 



f 



T 
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Code which 
is known to 
be safe 



\ 



\ 



3. Server 
forwards mobile 
application to next 



\ 



6* Server retrieves missing code 
from from its own pre-installed 
software. Because originating host 
is trusted, server may alternatively 
retrieve it from originating host 



40 




5. If receiving host cannot 
locate any missing code, the 
missing code is requested 
from the server 



40 




4. Mobile application 
is received 



Host 2 



Figure 9 
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Code which 
is known to 
be safe 



Server 




3. Server 
ensures new 
code is same 
as previously 
saved code. 



7. Server retrieves missing 
code from its own pre- 
installed software. If 
originating host is trusted, 
server may retrieve missing 
code from originating host. 



2. Server receives 
nobile application 



40 




50 



4. Server forwards 
mobile application to 
next host 



1. Mobile application is 
received from some other 
host, and later dispatched 
to next host. 



Host n 




6. If any required code is 
missing, receiving host 
requests it from the 
server. 



40 



5. Mobile application 
arrives at next host. 



Host n+1 



Figure 10 
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Code which 
is known to 
be safe 



Server 




3. Server 
saves mobile 
application's 

code 



7. Server retrieves missing 
code from its own pre- 
installed software. If 
originating host is trusted, 
server may retrieve missing 
code from originating host. 



1. Mobile application is 
received from some other 
host, and later dispatched 
to next host. 



6. If any required code is 
missing, receiving host 
requests it from the 
server. 



5. Mobile application 
arrives at next host 



Host n+1 



Host n 



Figure 1 1 
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f ) 



St. 



Hosti 



1. Mobile appiicaaoa 
is createcL and then 
later dispatched 



40 





5jO 



2. Server saves copy /^l ^6 Server compares 
of raobile appltca- ^ j \ new state against 
bon's state ^ * — \ saved state 
^ (it' V 



Hosts 



3. Server forwards 
mobile application 
next host 



^ ^ - "7 Server forwards 
^ " mobile appticanon 
/ to next host 

5. Server receives 
mobile application 





4. Mobile application is re- 
ceived, and later dispatched 
to next host 



Host 2 



J 



8. Mobile application ar* 
nves at next host 



40 
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Host1 



I. Mobile apphcatton 
is created, and then 
later dispatched 




5-d 
J- 



5-2. 



server 



2. Server saves copy/ 
of mobile appUca- 
tion's Itinerary/' 




3. Server forwards 
mobile application t< 
next host 




MO 



5-0 
/ 




Host n+1 



3 Server ensures new 
Itinerary matches previ- 
ously saved idneraiy 



V 



"A. Server forward! 
mobile applicauov 
to next host 



, 2. Server receives 
mobile application 





5. Mobile applicadon ar- 
rives at next host 



J 



J 



I . Mobile application is dis- 
patched to next host 



MO 



Hostn 



J 



5"0 



server 
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3. Server ensures past por- 
tion of new itinerary 
matches past portiai of 
previously saved itinerary 



I 

i 



\ ^ " ''4 Server forwardi 
^ mobile apphcauori 

/ to next host 



2. Server receives 
mobile application 




1. Mobile applicaaoa is dis- 
patched to next host. 



MO 



( Host n+1 




5. Mobile apphcanon ar- 
rives at next host 



MO 



Hostn 



Id 



1 



4 ' » ^ 



Host1 

I . Mobile ap- 
plication is 
created, and 
then later dis- 
patched 





(Trusted) 



J 



server " ^ 

2. Server determines that 
mobile application is new, 
so fiirther investigation is 
needed. Sever determines 
that the host is allowed to 
launch mobile applica- 
tions, so server forwards 
mobile application to next 
host. 
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3. Mobile applica- 
tion is received 



Host 2 



Hosti 

1 . Mobile appli- 
cation is created, 
and tiien later 
dispatched 




(Untnisted) 



J 
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) 



SO 

J 



Server 

2. Server determines that mo- 
bile application is new, so fur- 
ther investigation is needed. 
Sever determines that the host 
is not allowed to launch mo- 
bile applications, so server 
does not forward the mobile 
application. 



* 




B 



11^ 
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— Jerver 

2. Server determines 
that mobile application 
is not new, so no farther 
investigation is needed. 
Server forwards the mo; 
bile application to the ^ 
next host. t 



J 





3. Mobile applica- 
tion arrives at next 
host 



1. Mobile applica- 
tion is dispatched to 
next host. 



Hostn 



